$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa File: 7cff44e6-d0f1-3c26-9014-26f5bb427316.roa (raw, json) Hash identifier: /tmAPacrwDwWhdiDfclKuk9MzbJ5hKA/OAnW6UJTI7k= Subject key identifier: 9E:A7:2D:A3:82:7E:54:B9:A6:23:A5:F1:06:E2:59:0D:6D:DE:39:44 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D492A4C4A0352EEADF26839A0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 2914 IP address blocks: 173.44.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4c:4a:03:52:ee:ad:f2:68:39:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=1c62f93c-15f1-4f53-86ee-d9e0f0a80a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ff:c3:07:d7:61:7a:75:52:58:d4:89:76:95: af:c0:d6:39:58:23:19:49:1d:e3:9b:c9:e1:bc:d6: 54:01:3b:66:d9:3d:b0:48:5b:d3:29:c6:8c:3c:3d: 76:5c:e6:8b:04:67:f1:83:26:8b:66:b8:df:83:07: 66:2d:b4:75:76:31:f4:61:6e:f6:60:45:d2:1c:d8: 28:57:7c:84:99:4a:42:0e:78:81:7c:96:09:5e:a2: 22:92:0a:03:c6:4f:85:38:94:89:95:6d:24:85:f9: ad:ba:47:1b:8c:5f:c3:41:a2:72:f5:66:ed:25:1a: 51:1f:44:86:e3:86:20:df:81:ae:c9:94:8f:25:fa: b1:98:f9:da:21:a6:65:b7:a0:04:54:a0:d8:94:b7: 33:a1:ef:82:aa:fa:eb:a8:b3:15:48:07:19:df:34: 23:c2:7e:11:71:89:08:e9:46:41:57:d4:78:71:3c: e2:0a:7a:86:3a:a1:86:22:b0:92:3c:48:59:d4:55: 91:91:ba:92:32:49:bb:42:53:c7:5d:72:7d:8d:14: c9:dd:13:e2:0f:a2:00:3a:34:26:1d:5d:e8:62:44: e2:92:d3:a3:46:f0:cb:03:26:2d:55:2b:65:87:7d: 91:50:1b:d3:26:d8:23:9e:1d:72:36:b8:22:4b:e0: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:2D:A3:82:7E:54:B9:A6:23:A5:F1:06:E2:59:0D:6D:DE:39:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b0:04:33:0e:4a:40:6f:51:73:71:be:18:3d:7d:d3:94:39: d3:95:42:e2:86:65:af:b4:7c:20:a5:04:89:58:6e:4d:77:4a: 05:6f:a7:ec:d8:9a:2b:6b:fa:6e:ef:0a:de:fa:d8:16:22:6a: 38:1e:76:e1:d1:9b:58:3d:be:d4:ca:58:94:6a:7b:c6:83:e3: 7b:9b:63:e1:19:4d:82:51:f3:49:c4:29:f0:04:66:03:18:d7: 8a:9f:c0:2f:a3:2f:61:84:02:bf:42:9b:80:db:1d:a8:31:6a: 57:68:0e:ac:c3:89:79:1a:57:34:3b:76:d0:d0:94:ae:d0:4f: 65:29:66:f7:ae:f8:1b:c6:2c:10:72:23:c2:4e:72:65:3c:b0: 6b:2c:7b:81:96:8f:5f:49:0f:56:32:0e:d0:fb:09:2b:89:9c: a1:1f:4e:f7:7d:0d:6f:64:49:1d:e7:73:d6:65:18:86:55:dc: 9c:9c:8a:ea:40:52:22:1c:71:2f:72:cd:cd:54:d8:01:37:b5: 90:b6:a1:ed:3f:17:08:dd:cd:df:94:61:ce:c0:1c:78:05:ca: ed:32:f7:ce:af:85:45:da:a2:7d:dd:a8:aa:9c:ef:89:b9:02: 51:fb:07:d0:1e:a1:03:6b:36:ab:65:d4:2e:e6:4c:26:b0:e6: 69:dd:ff:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkxKA1LurfJoOaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MWM2MmY5M2MtMTVmMS00ZjUzLTg2ZWUtZDllMGYwYTgwYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v/DB9dhenVSWNSJdpWvwNY5WCMZSR3jm8nh vNZUATtm2T2wSFvTKcaMPD12XOaLBGfxgyaLZrjfgwdmLbR1djH0YW72YEXSHNgo V3yEmUpCDniBfJYJXqIikgoDxk+FOJSJlW0khfmtukcbjF/DQaJy9WbtJRpRH0SG 44Yg34GuyZSPJfqxmPnaIaZlt6AEVKDYlLczoe+CqvrrqLMVSAcZ3zQjwn4RcYkI 6UZBV9R4cTziCnqGOqGGIrCSPEhZ1FWRkbqSMkm7QlPHXXJ9jRTJ3RPiD6IAOjQm HV3oYkTiktOjRvDLAyYtVStlh32RUBvTJtgjnh1yNrgiS+DhIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6nLaOCflS5piOl8QbiWQ1t3jlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvN2NmZjQ0ZTYtZDBmMS0z YzI2LTkwMTQtMjZmNWJiNDI3MzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrSzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKwBDMOSkBvUXNxvhg9fdOUOdOVQuKGZa+0fCClBIlYbk13SgVvp+zY mitr+m7vCt762BYiajgeduHRm1g9vtTKWJRqe8aD43ubY+EZTYJR80nEKfAEZgMY 14qfwC+jL2GEAr9Cm4DbHagxaldoDqzDiXkaVzQ7dtDQlK7QT2UpZveu+BvGLBBy I8JOcmU8sGsse4GWj19JD1YyDtD7CSuJnKEfTvd9DW9kSR3nc9ZlGIZV3JyciupA UiIccS9yzc1U2AE3tZC2oe0/Fwjdzd+UYc7AHHgFyu0y986vhUXaon3dqKqc74m5 AlH7B9AeoQNrNqtl1C7mTCaw5mnd/1E= -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:35 2026 by rpki-client